35,648 results · Feed
-
Medium max 6.9SUSE-SU-2026:21094-1 1 CVE
Security update for pcre2
This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842).
first Apr 10, 2026 -
High max 7.8SUSE-SU-2026:21100-1 5 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). -…
first Apr 13, 2026 -
High max 8.8SUSE-SU-2026:21099-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregis…
first Apr 13, 2026 -
UnscoredopenSUSE-SU-2026:10560-1 3 CVEs
blender-5.1-5.1.1-1.1 on GA media
These are all security issues fixed in the blender-5.1-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 8.8openSUSE-SU-2026:10562-1 1 CVE
flannel-0.28.4-1.1 on GA media
These are all security issues fixed in the flannel-0.28.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 7.5openSUSE-SU-2026:10561-1 1 CVE
firecracker-1.15.1-1.1 on GA media
These are all security issues fixed in the firecracker-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Medium max 5.5openSUSE-SU-2026:10559-1 1 CVE
ImageMagick-7.1.2.19-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Low max 1.7SUSE-SU-2026:1416-1 1 CVE
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).
first Apr 16, 2026 -
Medium max 6.5openSUSE-SU-2026:10558-1 1 CVE
GraphicsMagick-1.3.46-5.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Low max 3.7SUSE-SU-2026:1406-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: Security issue: - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859). Non security issues: - recognize fuse 'portal' as a virtual file system (bsc#1234…
first Apr 16, 2026 -
High max 8.7SUSE-SU-2026:1415-1 1 CVE
Security update for rust1.93
This update for rust1.93 fixes the following issues: Security issue: - CVE-2026-31812: denial of service via crafted QUIC initial packet (bsc#1259623). Non security issue: - Resolve missing gcc requirement that may affect some crate buildin (bsc#1253321).
first Apr 16, 2026 -
Critical max 9.8SUSE-SU-2026:1408-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798). - CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).
first Apr 16, 2026 -
Critical max 9.3SUSE-SU-2026:1398-1 7 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: Security fixes: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). - CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982). - CVE-2026-26965: Out-of-bounds Write in freerdp (b…
first Apr 16, 2026 -
Medium max 5.0SUSE-SU-2026:1399-1 1 CVE
Security update for cups
This update for cups fixes the following issue: - CVE-2026-34990: Local print admin token disclosure using temporary printers (bsc#1261568).
first Apr 16, 2026 -
High max 8.9SUSE-SU-2026:1412-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues: - CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866). - CVE-2025-66471: excessive resource consumption via decompression of hig…
first Apr 16, 2026 -
High max 8.8SUSE-SU-2026:1396-1 1 CVE
Security update for plexus-utils
This update for plexus-utils fixes the following issue: Security fixes: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588). Update to version 4.0.2: * Bug Fixes + Specify /D for cmd.exe to byp…
first Apr 16, 2026 -
Medium max 6.7SUSE-SU-2026:1414-1 1 CVE
Security update for shim
This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevel_Variabl…
first Apr 16, 2026 -
High max 8.2SUSE-SU-2026:1394-1 2 CVEs
Security update for corosync
This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299). - CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
first Apr 16, 2026 -
Medium max 5.1openSUSE-SU-2026:10564-1 1 CVE
libpng16-16-1.6.57-1.1 on GA media
These are all security issues fixed in the libpng16-16-1.6.57-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:1400-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-32597: Fixed unknown `crit` header extensions accepts (bsc#1259616).
first Apr 16, 2026 -
Medium max 6.3openSUSE-SU-2026:10566-1 1 CVE
liblog4cxx-devel-1.7.0-2.1 on GA media
These are all security issues fixed in the liblog4cxx-devel-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:1378-1 1 CVE
Security update for kea
This update for kea fixes the following issues: Update to release 2.6.5: * A large number of bracket pairs in a JSON payload directed to any endpoint would result in a stack overflow, due to recursive calls when parsing the JSON. This has been fixed. (CVE-202…
first Apr 16, 2026 -
Critical max 9.8openSUSE-SU-2026:10567-1 5 CVEs
python311-Django-5.2.13-1.1 on GA media
These are all security issues fixed in the python311-Django-5.2.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Critical max 9.1SUSE-SU-2026:1395-1 1 CVE
Security update for azure-storage-azcopy
This update for azure-storage-azcopy fixes the following issues: - CVE-2026-33186: Authorization bypass in grpc-go due to improper validation of the HTTP/2 :path pseudo-header (bsc#1260307).
first Apr 16, 2026 -
Medium max 5.9openSUSE-SU-2026:10563-1 1 CVE
leancrypto-devel-1.7.2-1.1 on GA media
These are all security issues fixed in the leancrypto-devel-1.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
High max 7.5SUSE-SU-2026:1389-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2026-32597: Fixed unknown `crit` header extensions accepts (bsc#1259616).
first Apr 16, 2026 -
Critical max 9.8openSUSE-SU-2026:10565-1 7 CVEs
libraw-devel-0.22.1-1.1 on GA media
These are all security issues fixed in the libraw-devel-0.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2026 -
Critical max 9.2SUSE-SU-2026:1387-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow fo…
first Apr 16, 2026 -
Critical max 9.1SUSE-SU-2026:1411-1 2 CVEs
Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls
This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the …
first Apr 16, 2026 -
High max 8.1SUSE-SU-2026:1386-1 5 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…
first Apr 16, 2026 -
Critical max 9.8SUSE-SU-2026:1407-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798). - CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).
first Apr 16, 2026 -
High max 7.0SUSE-SU-2026:1385-1 5 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: improper resource argument validation can allow path traversal (bsc#125…
first Apr 16, 2026 -
Critical max 9.8SUSE-SU-2026:1379-1 3 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update to 149.0.2 and 140.9.1esr (bsc#1261663). - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 1…
first Apr 16, 2026 -
High max 7.0SUSE-SU-2026:1376-1 5 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3479: improper resource argument val…
first Apr 15, 2026 -
Medium max 5.3SUSE-SU-2026:1413-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issue: - CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting (bsc#1252441).
first Apr 16, 2026 -
High max 8.1SUSE-SU-2026:1375-1 6 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: …
first Apr 15, 2026 -
Medium max 5.9SUSE-SU-2026:1388-1 1 CVE
Security update for libtpms
This update for libtpms fixes the following issues: - CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528)
first Apr 16, 2026 -
None max 0.0openSUSE-SU-2026:10554-1 1 CVE
python314-3.14.4-1.1 on GA media
These are all security issues fixed in the python314-3.14.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026 -
None max 0.0openSUSE-SU-2026:10553-1 1 CVE
python313-3.13.13-1.1 on GA media
These are all security issues fixed in the python313-3.13.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026 -
High max 7.8openSUSE-SU-2026:10556-1 5 CVEs
xorg-x11-server-21.1.21-5.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.21-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2026